Known vulnerabilities in IBM Cloud Pak System 2.3.0

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Version: 2.3.0
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 47
Public exploits: 5
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Cloud Pak System version 2.3.0 IBM Cloud Pak System 2.3.0 is affected by 47 vulnerabilities: 1 critical, 12 high, 24 medium, 10 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114445 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-20479		 CWE-327 High
No
No
 - 26.08.2025 SB2022051410
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 2.3.3.6 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70080 - Improper input validation
CVE-2022-31698		 CWE-20 Medium
Public exploit available
No
 2.3.3.6 09.12.2022 SB2022120903
SB2023040648
#VU70079 - Information Exposure Through Log Files
CVE-2022-31697		 CWE-532 Low
No
No
 2.3.3.6 09.12.2022 SB2022120903
SB2023040648
SB2023051945
and 1 more
#VU68779 - Improper Validation of Array Index
CVE-2020-28852		 CWE-129 Medium
No
No
 - 26.10.2022 SB2021010205
SB2022102674
SB2022111597
and 13 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 2.3.3.6 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU66748 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-5259		 CWE-94 Medium
No
No
 2.3.3.6 24.08.2022 SB20200310151
SB2022082433
SB2023031611
and 8 more
#VU60186 - Out-of-bounds write
CVE-2021-44142		 CWE-787 High
Public exploit available
No
 2.3.3.6 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Public exploit available
No
 - 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525		 CWE-674 Medium
No
No
 - 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 2.3.3.6 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54855 - Resource exhaustion
CVE-2021-36373		 CWE-400 Medium
No
No
 2.3.3.6 14.07.2021 SB2021071409
SB2021072011
SB2022080830
and 16 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU29228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4051		 CWE-79 Low
No
No
 2.3.3.6 24.06.2020 SB2020062408
SB2022082433
SB2022120724
and 7 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 2.3.3.6 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU25348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10785		 CWE-79 Low
No
No
 2.3.3.6 14.02.2020 SB2020021405
SB2022082433
SB2023040530
and 7 more
#VU14515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1000632		 CWE-611 Low
No
No
 2.3.3.6 21.08.2018 SB2018082321
SB2018120722
SB2018121006
and 20 more
#VU36773 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-15494		 CWE-74 High
No
No
 2.3.3.6 18.08.2018 SB2018081804
SB2022070505
SB2022082433
and 11 more
#VU8911 - Permissions, Privileges, and Access Controls
CVE-2016-6814		 CWE-264 Low
No
No
 2.3.3.6 20.10.2017 SB2017101714
SB2020031303
SB20200114129
and 12 more
#VU831 - Deserialization of Untrusted Data
CVE-2015-3253		 CWE-502 High
No
No
 2.3.3.6 11.10.2016 SB2020042104
SB2023030707
SB2023040530
and 5 more


Showing elements 1 - 20 out of 47